comment on

Hello, My GET request works with LWP, however, the same request using PUT method instead of GET returns a 401. I also tried curl and Postman and my PUT request is working using both of those, just not with LWP. I used LWP::ConsoleLogger to see the details. This is my code:

#!/usr/bin/perl
{
    package DINAgent;
    use strict;
    use warnings;
    use base 'LWP::UserAgent';
    sub get_basic_credentials {
        return ('admin','password');
    }
}

require 5.010_001;
use strict;
use warnings;
use HTTP::Request;
use Encode qw(encode_utf8);
use LWP::ConsoleLogger::Everywhere ();

my $ip = '192.168.54.24';
my $url = "http://".$ip."/restapi/relay/outlets/=4/state/";
my $header = [
    'X-CSRF' => 'x',
    'Accept' => 'application/json',
    'Content-Type' => 'application/x-www-form-urlencoded',
];
my $data = encode_utf8('value=true');
my $req = HTTP::Request->new('GET', $url, $header, $data);
my $ua = DINAgent->new;

my $res = $ua->request($req);
[download]

And when I run it this is what the request looks like:


GET http://192.168.54.24/restapi/relay/outlets/=4/state/

.---------------------------------+-----------------------------------
+--------------.
| Request (before sending) Header | Value                             
+              |
+---------------------------------+-----------------------------------
+--------------+
| Accept                          | application/json                  
+              |
| Authorization                   | Digest username="admin", realm="DL
+I DIN4181200- |
|                                 | 5889", qop=auth, algorithm="MD5", 
+uri="/restap- |
|                                 | i/relay/outlets/=4/state/", nonce=
+"lUbDs5U7hoG- |
|                                 | pVuUw", nc=00000001, cnonce="5ad8c
+8da", respon- |
|                                 | se="9b02b9381e1ce4b8de39d2d00d1769
+26", opaque=- |
|                                 | "poDELG+OAifnQbRd"                
+              |
| Content-Type                    | application/x-www-form-urlencoded 
+              |
| User-Agent                      | libwww-perl/6.33                  
+              |
| X-CSRF                          | x                                 
+              |
'---------------------------------+-----------------------------------
+--------------'

.------------.
| Content    |
+------------+
| value=true |
'------------'

.--------------------------.
| Text                     |
+--------------------------+
| {                        |
|     value => "true",     |
| }                        |
'--------------------------'

.--------------------------------+------------------------------------
+--------------.
| Request (after sending) Header | Value                              
+              |
+--------------------------------+------------------------------------
+--------------+
| Accept                         | application/json                   
+              |
| Authorization                  | Digest username="admin", realm="DLI
+ DIN41812005- |
|                                | 889", qop=auth, algorithm="MD5", ur
+i="/restapi/- |
|                                | relay/outlets/=4/state/", nonce="lU
+bDs5U7hoGpVu- |
|                                | Uw", nc=00000001, cnonce="5ad8c8da"
+, response="- |
|                                | 9b02b9381e1ce4b8de39d2d00d176926", 
+opaque="poDE- |
|                                | LG+OAifnQbRd"                      
+              |
| Content-Type                   | application/x-www-form-urlencoded  
+              |
| User-Agent                     | libwww-perl/6.33                   
+              |
| X-CSRF                         | x                                  
+              |
'--------------------------------+------------------------------------
+--------------'

==> 207 Responses from multiple resources follow
[download]

So then I just replace 'GET' with 'PUT' in the code and my LWP PUT request looks like this:


PUT http://192.168.54.24/restapi/relay/outlets/=4/state/

.---------------------------------+-----------------------------------
+--------------.
| Request (before sending) Header | Value                             
+              |
+---------------------------------+-----------------------------------
+--------------+
| Accept                          | application/json                  
+              |
| Authorization                   | Digest username="admin", realm="DL
+I DIN4181200- |
|                                 | 5889", qop=auth, algorithm="MD5", 
+uri="/restap- |
|                                 | i/relay/outlets/=4/state/", nonce=
+"/TiSJpxNOX2- |
|                                 | YUGF9", nc=00000001, cnonce="5ad8c
+6b2", respon- |
|                                 | se="4d899287d76eeb9544e1f74398a751
+89", message- |
|                                 | -digest="d41d8cd98f00b204e9800998e
+cf8427e", op- |
|                                 | aque="32bmBh1vwolMgswm"           
+              |
| Content-Type                    | application/x-www-form-urlencoded 
+              |
| User-Agent                      | libwww-perl/6.33                  
+              |
| X-CSRF                          | x                                 
+              |
'---------------------------------+-----------------------------------
+--------------'

.------------.
| Content    |
+------------+
| value=true |
'------------'

.--------------------------.
| Text                     |
+--------------------------+
| {                        |
|     value => "true",     |
| }                        |
'--------------------------'

.--------------------------------+------------------------------------
+--------------.
| Request (after sending) Header | Value                              
+              |
+--------------------------------+------------------------------------
+--------------+
| Accept                         | application/json                   
+              |
| Authorization                  | Digest username="admin", realm="DLI
+ DIN41812005- |
|                                | 889", qop=auth, algorithm="MD5", ur
+i="/restapi/- |
|                                | relay/outlets/=4/state/", nonce="/T
+iSJpxNOX2YUG- |
|                                | F9", nc=00000001, cnonce="5ad8c6b2"
+, response="- |
|                                | 4d899287d76eeb9544e1f74398a75189", 
+message-dige- |
|                                | st="d41d8cd98f00b204e9800998ecf8427
+e", opaque="- |
|                                | 32bmBh1vwolMgswm"                  
+              |
| Content-Type                   | application/x-www-form-urlencoded  
+              |
| User-Agent                     | libwww-perl/6.33                   
+              |
| X-CSRF                         | x                                  
+              |
'--------------------------------+------------------------------------
+--------------'

==> 401 Unauthorized
[download]

One thing I noticed is that LWP PUT request puts a 'message-digest' into the authentication header, maybe this is causing some issue with authentication?
Of course the device I am interacting with is on a local network so you cannot reproduce the issue... but let me know if you have some suggestion on how to find the issue?
Again, I am successfully able to send this PUT request using Postman and curl, so must be something in my LWP implementation that is causing the issue.
Thank you.

In reply to LWP digest authentication fails with PUT method by bilal_j

Are you posting in the right place? Check out Where do I post X? to know for sure.
Posts may use any of the Perl Monks Approved HTML tags. Currently these include the following:
<code> <a> <b> <big> <blockquote> <br /> <dd> <dl> <dt> <em> <font> <h1> <h2> <h3> <h4> <h5> <h6> <hr /> <i> <li> <nbsp> <ol> <p> <small> <strike> <strong> <sub> <sup> <table> <td> <th> <tr> <tt> <u> <ul>
Snippets of code should be wrapped in <code> tags not <pre> tags. In fact, <pre> tags should generally be avoided. If they must be used, extreme care should be taken to ensure that their contents do not have long lines (<70 chars), in order to prevent horizontal scrolling (and possible janitor intervention).
Want more info? How to link or How to display code and escape characters are good places to start.


Pathologically Eclectic Rubbish Lister
	PerlMonks